General
-
Target
d1351ef95b591dac244e8abc52bbc49800de4bba9554a7504ff8063c7cb09d0e
-
Size
1.2MB
-
MD5
cf6a7e14c6a958d86aeabdd583093e13
-
SHA1
4eb75e27243501418bb3b8d8e91742ea6693041a
-
SHA256
d1351ef95b591dac244e8abc52bbc49800de4bba9554a7504ff8063c7cb09d0e
-
SHA512
ddb6c252d833a51dab08cf0608310c302fe5562f13c06858fff2a9c510d8013a346966673be5e549f61822a212ab238cc8fab69b508312616123aee4e6211e1d
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PmK/lzapbU4w2DyAa3DzRAmE2Z/M/6LZiaMow:Lz071uv4BPm6lgVsDztnMN
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
d1351ef95b591dac244e8abc52bbc49800de4bba9554a7504ff8063c7cb09d0e
Headers
Sections
-
out.upx
Headers
Sections